Multi-step quantum secure direct communication using multi-particle 

Green-Horne-Zeilinger state 
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A multi-step quantum secure direct communication protocol using blocks of multi-particle max- 
imally entangled state is proposed. In this protocol, the particles in a Green-Horne-Zeilinger state 
are sent from Alice to Bob in batches in several steps. It has the advantage of high efficiency and 
high source capacity. 
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Quantum communication becomes one of the most im- 
portant applications of quantum mechanics today. Quan- 
tum key distribution(QKD) is one of the most mature 
techniques, providing a secure way for creating a pri- 
vate key with which two authorized parties, Alice and 
Bob, can realize secure communication. QKD has at- 
tracted a widespread attention and progressed quickly 
00 EH 0] over the past two decades. 

Recently, a new concept in quantum cryptography, 
quantum secure direct communication (QSDC) was pro- 
posed. Upto date, QSDC has been studied by many 
groups 0lE II 113 12111 111 El E3 With QSDC Alice 
and Bob can exchange the secret message directly with- 
out generating a private key first and then encrypting 
the secret message and then send the ciphertext through 
classical communication. The QSDC protocol originally 
proposed by Beige et al. Q is only a scheme for trans- 
mitting secret information which can be read out with 
an additional classical information for each qubit. Later, 
Bostrom and Felbinger put forward a ping-pong QSDC 
scheme following the idea of quantum dense coding Q] 
with Einstein-Podolsky-Rosen (EPR) pairs. As pointed 
out by their authors, ping-pong protocol is just a quasi- 
secure direct communication protocol as it leaks some of 
the secret message in a noisy channel. In Ref. 9], some 
of us proposed a two-step QSDC protocol using entan- 
gled particles. In this paper, the idea of transmitting 
quantum data in blocks for the security of QSDC was 
proposed. 

Recently, Gao et al. [lfj designed a protocol for con- 
trolled quantum tclcportation and secure direct commu- 
nication using GHZ state. 

As GHZ-state has a larger Hilbert space, protocols 
based on them can provide larger source capacity. With 
the development of technology, the generation and ma- 
nipulation are becoming more sophisticated, and prac- 
tical applications of these highly entangled objects are 
expected in the future. It is thus interesting to look for 
ways of using these quantum objects in quantum key dis- 
tribution. In this paper, we present a QSDC protocol 



using maximally entangled three-particle Green-Horne- 
Zeilinger(GHZ) states. It will be shown that this QSDC 
protocol appears to provide better security. In addition, 
this QSDC protocol can also be equipped with quantum 
privacy amplification so that it can work under realistic 
environment. 

We first introduce the idea of GHZ state dense cod- 
ing briefly. Dense coding using three particle entangled 
states has been proposed by Lee et al. ^3- The proto- 
col we propose is the application of three particle dense 
coding to QKD. Suppose the maximally entangled three- 
particle state is 

\*)abC= A=(\000) ABC + ABC). (1) 
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There are eight independent GHZ-states, namely 
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By performing single-particle unitary operations on 
any two of the three particles, one can change from one 
GHZ-state to another. The unitary operations are the 
product of the Pauli and identity matrices: I, a x , ia y , a z . 
Though there are altogether 16 such operations, only half 
of them can generate distinguishable states. For our pur- 
pose, we choose the following eight operations 



Ui = a z <g> a z , U 2 = I <E 

U 3 = io-y ® cr z , Ua = a x 

U 5 =I®O x , U 6 = CT Z 

U 7 = <7 x ®a x , Us = i(T y 
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to realize the following transformation, 

[/■fc|*>i = |*> fc ,A=l,2,...,8. (4) 

Starting from the state one can match each unitary 
operation with a GHZ-state uniquely. 

We now describe the multi-step quantum secure di- 
rect communication using GHZ state in detail. First 
Alice and Bob make an agreement that each of the 
states \ty)k represents a three bits binary number, namely 
|*)i 000, |*) 2 =>■ 001, |*) 3 =► 010, |tf) 4 =>■ 011, 
|*) 5 =► 100, |*) 6 =► 101, |*) 7 =► 110, |*> 8 =► 111 
respectively. Then the specific steps in the QSDC proto- 
col is 

Step 1: Alice produces a sequence of N GHZ states. 
Each GHZ-state is in state 

\*) A BC = 4?(|000) ABC + \m)ABc). (5) 
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We represent the sequence of N GHZ-states 
as [P 1 (A)P 1 (B)P 1 (C), P 2 (A)P 2 (B)P 2 (C), 
Pn{A)Pn(B)Pn(C)], where the numbers in the 
subscript is the order number of the GHZ-triplet, and 
the alphabets inside the bracket, A, B and C , represent 
the particles within each GHZ-triplet. 

Step 2: Alice takes the C-particle from each GHZ 
triplet (particle P M (C), M = 1,2, ...,7V) to form a C- 
sequence, [Pi(C), P 2 (C),... Pn{C)]. Then she sends the 
C-sequence to Bob as shown in Fig^ 

Step 3: When Bob receives the C-sequence [Pi(C), 
P 2 (C),... P/v(C)]. Alice and Bob perform a security 
check to see if there is eavesdropping in the line. Se- 
curity check can be realized by some measurements so 
that the entangled states collapse. Here we provide two 
alternatives. 

Method 1 contains the following steps. First, Bob ran- 
domly chooses particles from his C-sequence to make ei- 
ther o~ z or o~ x measurement. This collapses the GHZ state 
into either 1 000) or |111) with equal probability if a z is 
measured, or into (|+x + x) + | — x — x))/\/2 if | + a:) 
is obtained, (| + x — x) + \— x + x))/\/2 if | — x) is ob- 
tained when o~ x is measured. Then he announces the 
positions of these particles and the kind of measurement 
he has made. With this information, Alice can make a o~ z 
measurement on the two particles in the corresponding 
GHZ-triplet if Bob measures a z , or a a x measurement 
on the two particles in the corresponding GHZ-triplet if 
Bob measures a x . They check the results to discover the 
existence of Eve. If the channel is safe, the results must 
be completely correlated, i.e. if Bob get |0)(|1)), then Al- 
ice get 1 00) ( 1 1 1) ) when they choose their measurements 
along z-direction, and similar case happens for the a x . 
For instance, if Eve gets hold the C particle and sends a 
fake C particle to Bob, this security check will discover 
her. 

Method 2 contains the following steps. First, Bob ran- 
domly chooses particles from his C-sequence and he also 
measures each of these chosen particles using either a z 



or a x . This collapses the GHZ state into either 1 000) or 
| 111) with equal probability if o~ z is measured, or into 
(| 00) + |H))/V2 if | + x) is obtained, (|00) - |ll))/v^ 
if | — x) is obtained when a x is measured. Then he an- 
nounces the positions of these particles and the kind of 
measurement he has made. With this information, Alice 
can make a o~ z measurement on the two particles in the 
corresponding GHZ-triplet if Bob measures a z , or a Bell- 
basis measurement if Bob measures a x . They then pub- 
lish their measured result to check the existence of Eve. 
If the channel is safe, the results must be completely in 
accordance. On the condition of safe channel, they go to 
the next step, otherwise they stop the communication. 

Step 4: Alice encodes her information on the remain- 
ing two qubits message sequence, or the AP-sequence, 
[P 1 (A)P 1 (B), P 2 (A)P 2 (B), P N (A)P N (B)] by per- 
forming the unitary operations, which has been described 
by equations J3J and ijlfl. For the secure communication, 
Alice selects some sampling pairs of her particles, ran- 
domly chosen from the >li3-sequence and performs one of 
the eight operations randomly on them. The remaining 
pairs of particles in the AP-sequence are encoded with 
secret messages. After that she sends the second block 
of particles [Pi(P), P 2 (B),... P N (B)} which is formed 
by the P particles of the GHZ state to Bob. After Bob 
receives these P particles, they make a security check in 
which Alice starts the security check by choosing some 
of the sampling pairs for measurement using one of the 
checking method described in step 3. If the security check 
is passed, Alice then sends Bob the last sequence [Pi(A), 
P 2 (A),... Pjv(A)] which consist of the A particles of the 
GHZ state. Upon receiving this A particle sequence, they 
also perform a security check. If the security check is 
passed, they go to the next step. 

Step 5: On Bob's side, when he receives the three 
blocks of particles step by step, he can make a GHZ 
state measurement on each of the GHZ-state and gets 
the state exactly as shown in equation J2J and thus gets 
the message which represent the message Alice sends. 

Step 6: If the N GHZ-states does not complete the task 
of communicating the secret message, then they continue 
with the next batch of N GHZ-states, starting from step 
1. 

Under noisy channel, quantum error correction and 
privacy amplification have to be performed. 

Compared to the two-particle Bell-basis state QSDC 
protocol, the three-particle GHZ state can transmit three 
bits of information each time though only two encoding 
unitary operations are performed on only two qubits, a 
characteristic signature of the superdense coding. When 
multi-partite entangled state are used, it will transmit 
more number of bits. The generalization of this scheme to 
multi-particle entangled states is given in the following. 
First Alice produces a squence of N p-particle entangled 
states in the form 

|*) = 4?(|0i0 2 ....0 p ) + |l 1 l 2 ....l p )). (6) 
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FIG. 1: The QSDC procedure using GHZ state. 



The pth particle from each multiplet is sends to Bob first, 
and upon receiving this pth particle sequence, Alice and 
Bob perform security check so that they can assure the 
security of the channel. After assuring the security of 
the channel, Alice performs encoding operations on the 
remaining p — 1 particles in each multiplet of particles: 
for the (p — l)th particle, four unitary operations are 
possible, namely /, <r x , ia y and a z , but for the remaining 
p — 2 particles, only two unitary operations, a x and / are 
allowed. Though the unitary operations performed on 
only p — 1 particles, the number of independent unitary 
operations is however 4 x 2 x • ■ ■ x 2 = 2 P . Each time , 
a multiplet of entangled particles can transmit p bits of 
classical information. 

Another possible generalization of the scheme is to 
higher dimensions, namely qubit is generalized into qu- 
dit as in Ref. [Tsl ] in superdense coding. The maximally 
entangled GHZ- state in d-dimcnsional Hilbert space is 



|* n ) = -= V \n) A ® \n) B ® \n)c 



(7) 



where n = 0, 1, 2, d — 1. The single particle unitary 
operations used for superdense coding are 



U„ 



^ e 2nijm/d\j + n mod 



(8) 



Using these unitary operations U mn , one can construct 
superdense coding with d-dimensional single particle 
Hilbert space. To depict it explicitly, we formalize 
the multi-step superdense coding scheme in three-level 
Hilbert space. The three-level GHZ state is: 
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By applying single qutrit unitary operations given in 
(JSJ) with d — 3 on the first two particles A and B in 
the following combination, Uqq{A) £g> U mn (B), Uqi{A) ® 
U m n(B), Uo2(A)®U mn (B), where m, n e 0, 1,2, one can 
make unique transformation from state © to any of the 



27 independent three-qudits GHZ-state. For example, 

(Uoo ® U mn )\*oo) = -^(l° n0 ) + e 2m " /3 |l(n + 1 mod d)l) 

+ e 4m "/ 3 |2(n + 2mod d)2)), 
(Uoi ® U mn )\* 00 ) = ^(|lr»0) + e 2m ^ 3 \2(n + 1 mod d)l) 



e 4m " /3 |0(n + 2mod d)2)), 

^(|2n0)+e 2m " /3 |0(n + 
V3 

>"/ 3 |l(n + 2mod d)2)). 



(U 2 O U mn )\^oo) = ^d 2 "°) + e 2m " /3 |0(n + 1 mod d)l) 



(10) 



Now we come to the multi-step QSDC using qudit su- 
perdense coding. In order to encode the secret message, 
Alice and Bob make an agreement on that each of the 
unitary operations U 00 (A) ® U mn {B), U 01 (A) <E> U mn (B), 
£^02(^4) ® U mn (B), where m, n S 0,1,2, represent one 
number in the three ternary number such 000, 012 etc. 
Then the details of the protocol will be similar for the 
qubit GHZ-state case. The number of the possible uni- 
tary operations is 3 P which is a direct generalization of 
that with two-level quantum system, where p is the num- 
ber of particles. 

It is worth emphasizing that the multi-step should not 
be replaced by a three-step process because it sacrifices 
the security. For instance, if we divide the p — 1 particles 
into two parts with p\ and pi each. First Alice sends 
Bob the last particle in each GHZ-state. Then she may 
perform the encoding operations on the remaining p — 1 
particles and send the p\ first, and then later send the 
remaining P2 particles after the security of the p\ par- 
ticles is assured. However, when Eve intercept those p\ 
particles, she can obtain partial information. In the orig- 
inal GHZ-state, a measurement of the p\ particles yields 
either 00 • • ■ of 11 • ■ ■ 1, but after some unitary trans- 
formation, the measurement may obtain either 10 • • • 1 of 
01 • • - 0. Eve may obtain partial information from such 
measurement. These partial information contains some 
secret message hence is risky. This is in striking contrast 
to quantum key distribution there the keys do not carry 
the secret message, one can simply drop the raw key if 
eavesdropping is discovered. By sending the particles 
in multi-steps, this danger is avoided since Eve's mea- 
surement on a single particle does not reveal any useful 
information. 

The security of this multi-step QSDC with GHZ state 
is similar to that using EPR entangled states in Ref.[j|. 
When the entangled particles are not in one side, it is 
just like the BBM92 QKD protocol0- As the secret in- 
formation is encoded in the whole entangled state, Eve 
can not get useful information if she just gets part of the 
entangled state. When Eve is in the quantum line, the 
state of the composite system is 



M= J2 l £ >M>l c > 



(11) 



a,6,ce(0,l) 
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where \e) is Eve's state used to probe the particle. \a, b) 
and |c) are GHZ states shared by Alice and Bob after 
the first step transmission. When she eavesdrops the C 
particle sequence, the whole system will be: 

|V)=^[|00}( ai |0)| £o o)+/3i|l)koi)) 

+ |ll)(^|l)|eio)+o 2 |0)|eii))], 

where £00, £01, £io> £ n are Eve's states respectively. We 
can write out the probe operator 

(i3) 

Because E is an unitary operator, the complex number 
ai, a 2 , Pi, satisfy |c*i| 2 + |/?i| 2 = \a 2 \ 2 + |/3 2 | 2 - 1. 
The error rate introduced by Eve is e = |/3i| 2 = |/3 2 | 2 = 
1 — |ai| 2 = 1 — |tt2| 2 - The security can thus be similarly 
analyzed. 

The discussions above are based on the ideal condi- 
tions. If the channel noise cannot be omitted, the security 
problems arise. Eve may captures some of the particles 
in the sequence and send the left to Bob through a bet- 
ter channel. If she intercepts the message sequence, and 
does a GHZ-state measurement, she may gets some of 



the secret message. So there are probabilities of infor- 
mation leakage. To avoid the dangerous, we consider a 
entanglement swapping strategy. Bob perform the quan- 
tum entanglement swapping on the particles he receives 
and compare the result with Alice's: if the particles pre- 
served there, the entanglement swapping succeed. They 
measures their particles with either a z or a x . If they get 
the correlation results, the secure channel established and 
message sending can be protected. 

In conclusion, we proposed the multi-step GHZ state 
quantum secure direct communication protocol and gen- 
eralized it to the high dimensional qudit case. The se- 
curity of the protocol is also discussed. In ideal condi- 
tion, the protocol is safe against eavesdropping. In noisy 
channel, quantum privacy amplification has to be used 
to obtain security. 

The authors wish to thank Drs Jian Wang,Quan 
Zhang, Lin-mei Liang, Chao-jing Tang for helpful dis- 
cussions. 

This work is supported the National Fundamental Re- 
search Program Grant No. 001CB309308, China Na- 
tional Natural Science Foundation Grant No. 60433005, 
the Hang-Tian Science Fund, and the Excellent Young 
University Teachers' Fund of Education Ministry of 
China. 



[1] C. H. Bennett and G. Brassard, in Proceedings of IEEE 
International Conference on Computers, Systems and 
Signal Processing, Bangalore, India , 175-179, (IEEE, 
New Yoir, 1984). 

[2] C. H. Bennett, G. Brassard, and N. D. Mcrmin, Phys. 
Rev. Lett. 68, 557 (1992). 

[3] C. H. Bennett, Phys. Rev. Lett. 68, 3121 (1992). 

[4] C. H. Bennett and S. J. Wiesner, Phys. Rev. Lett. 68, 
3121 (1992). 

[5] N. Gisin, G. Ribordy, W. Tittel and H. Zbinden, Rev. 

Mod. Phys. 74, 145 (2002), and the references therein. 
[6] Y. S. Zhang, C. F. Li and G. C. Guo, Phys. Rev. A 64, 

024302 (2001); G. P. Guo, C.F. Li, B. S. Shi, J. Li and 

G. C. Guo, Phys. Rev. A 64, 042301 (2001); P. Xue, C. 

F. Li, and G. C. Guo, Phys. Rev. A 65, 022317 (2002). 
[7] A. Beige, B.-G. Englert, C. Kurtsiefer, and H Weinfurter, 

Acta Phys. Pol. A 101, 357 (2002); J. Phys. A 35, L407 

(2002). 

[8] K. Bostrom and T. Felbinger, Phys. Rev. Lett. 89, 
187902 (2002). 

[9] F. G. Deng, G. L. Long, and X. S. Liu, Phys. Rev. A 68, 



042317 (2003). 

[10] F. G. Deng and G. L. Long, Phys. Rev. A 69, 052319 
(2004). 

[11] Q. Y. Cai and B. W. Li, Chin. Phys. Lett. 21, 601 (2004). 
[12] F. L. Yan and X. Zhang, Euro. Phys. Journal. B 41(1), 
75 (2004). 

[13] T. Gao, F. L. Yan and Z. X. Wang, NUOVE CIMENTO 
DELLA SOCIETA ITALIAN A DI FISICA B 119 (3), 
313 (2004). 

[14] Z. J. Zhang, Z. X. Man an Y Li, Phys. Lett. A 333, 46 

(2004); Z. X. Man, Z. J. Zhang and Y. Li, Chin. Phys. 

Lett. 22, 18 (2005). 
[15] Q. Y. Cai and B. W. Li, Phys. Rev. A 69,054301 (2004). 
[16] T. Gao, F. L. Yan and Z. X. Wang, Zeitschrift fur Natur- 

forschung A 59(9), 597 (2004). 
[17] H. J. Lee, D. Ahn and S. W. Hwang, Phys. Rev. A 66, 

024304 (2004). 

[18] X. S. Liu, G. L. Long, D. M. Tong and F. Li, Phys. Rev. 
A 65, 022304 (2002). 



